Security System for Industrial Control Infrastructure

Abstract

An industrial control system providing security against tampering or modification generates periodic state thumbprints defining a state of control elements that may be forwarded to a security or safety appliance for comparison to a benchmark thumbprint indicating no tampering. The transmitted state thumbprint may capture not only programs but also configuration and environmental states of the control element.

Description

STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR DEVELOPMENTCROSS REFERENCE TO RELATED APPLICATIONBACKGROUND OF THE INVENTION[0001]The present invention relates to industrial controllers controlling factory automation and / or industrial processes and in particular to a system providing enhanced security for industrial control systems against malicious acts.[0002]Industrial control systems have traditionally been protected against tampering or malicious activity by the same safeguards used to protect the physical equipment of the factory or the like, that is limiting physical access to the industrial controller and its associated equipment.[0003]Modern industrial control systems employing distributed processing as well as network and Internet connections have greater exposure to attack. While such systems may be physically secured, more points of security must be established for distributed systems, and network connections to the Internet can render physical security irrelevant. Re...

AI Technical Summary

Benefits of technology

The invention provides a system for securely monitoring a control system made up of multiple components. This system can detect when someone tries to tamper with the control system without using up too much bandwidth. The system can also control when state information is transmitted to prevent conflicts and bandwidth issues. Additionally, the system can make it easy to remotely assess the overall state of the control system by comparing state information from each component with a standard.

Problems solved by technology

While such systems may be physically secured, more points of security must be established for distributed systems, and network connections to the Internet can render physical security irrelevant.

Unlike attacks on standard computer equipment and servers, attacks on industrial control systems can conceivably produce damage to physical property and risk to human life.

Images